GO-2024-3106 vulnerabilities

Vulnerabilities for packages: controller-gen, zot, gitness, cluster-proportional-autoscaler, k3d, nri-nginx, bazelisk, timoni, flyte, buildkitd, capslock, harbor-scanner-trivy, git-lfs, neuvector-sigstore-interface, grpcurl, kube-metrics-adapter, newrelic-infrastructure-agent, hcloud,...

CVE-2026-47766: UNIX Symbolic Link (Symlink) Following

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs /dev directory without ONOFOLLOW. If an OCI bundle contains rootfs/dev as a symlink and the bundle configuration does not mount /dev, crun follows that...

CLEANSTART-2026-PU07904 Security fixes in fluent-operator 3.9.0-r2

Package fluent-operator version 3.9.0-r2 fixes 9 vulnerabilities: CVE-2026-46600, CVE-2026-25681, CVE-2026-27136, CVE-2026-39821, CVE-2026-25680...

CLEANSTART-2026-WX78037 Security fixes in kubernetes-dns-node-cache 1.26.8-r6

Package kubernetes-dns-node-cache version 1.26.8-r6 fixes 2 vulnerabilities: CVE-2026-50274, ghsa-74j5-xf3v-crq8...

[SECURITY] Fedora 43 Update: cri-o1.34-1.34.11-1.fc43

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

[SECURITY] Fedora 44 Update: cri-o1.34-1.34.11-1.fc44

Open Container Initiative-based implementation of Kubernetes Container Runtime Interface...

Fedora 44 : cri-o1.34 (2026-8ce4ffda9c)

The remote Fedora 44 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-8ce4ffda9c advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

Fedora 43 : cri-o1.34 (2026-7e85920dc5)

The remote Fedora 43 host has a package installed that is affected by a vulnerability as referenced in the FEDORA-2026-7e85920dc5 advisory. - Update to release v1.34.11 - Resolves: rhbz2510870 - Resolves CVE-2026-34986: rhbz2455652 - Upstream fixes Tenable has extracted the preceding description...

PT-2026-71326

Name of the Vulnerable Software and Affected Versions KubeVirt affected versions not specified Description A symlink following issue exists in the KubeVirt virt-handler migration proxy. During live migration, virt-handler uses net.Dial to connect to Unix sockets within the target virt-launcher po...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

A path traversal vulnerability exists in gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications. This flaw allows an authenticated, unprivileged software adversary to perform a low-complexity attack via local access and passive user interaction to achieve an escalation of ...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

EUVD-2026-56528

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

CVE-2026-32677

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

PT-2026-70337

Name of the Vulnerable Software and Affected Versions gaudi-container-runtime versions prior to 1.24.0 Description A path traversal issue exists within Ring 3: User Applications, which may allow an authenticated, unprivileged software adversary to escalate privileges. This can occur via local...

CVE-2026-32677: Improper Limitation of a Pathname to a Restricted Directory

Path traversal for some gaudi-container-runtime before version 1.24.0 within Ring 3: User Applications may allow an escalation of privilege. Unprivileged software adversary with an authenticated user combined with a low complexity attack may enable escalation of privilege. This result may...

Gaudi Container Runtime Software Advisory

Summary: A potential security vulnerability for some Gaudi Container Runtime software may allow escalation of privilege. Intel is releasing software updates to mitigate this potential vulnerability. Vulnerability Details: CVEID: CVE-2026-32677 Description: Path traversal for some...

stackrox v4.11.3-rc.1

Table of Contents StackRox Kubernetes Security Platform Table of Contents Community Deploying StackRox Quick Installation using Helm Manual Installation using Helm Installation using the Operator Installation via Scripts Kubernetes Distributions EKS, AKS, GKE OpenShift Docker Desktop, Colima, or...